Gentoo Linux Security Advisory GLSA 200603-22 – Multiple vulnerabilities in PHP allow remote attackers to inject arbitrary HTTP headers, perform cross site scripting or in some cases execute arbitrary code. Versions less than 4.4.2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44951/glsa-200603-22.txt
Source: https://packetstormsecurity.com/files/44951/Gentoo-Linux-Security-Advisory-200603-22.html